What is the meaning of the "*" symbol in this code? select * from tbl_guest_book where customer_email='".$_REQUEST['txtEmail']."'"; Thanks, Jimmyb29
You are selecting all fields from the table tbl_guest_book. Additionally to secure your code you should escape the variables (assuming you are using mysql_connect and not PDO/mysqli_connect as you should be): select * from tbl_guest_book where customer_email='" . mysql_real_escape_string($_REQUEST['txtEmail']) . "'"; Code (markup):